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VISUALIZING THE BALANCE BETWEEN IT SECURITY AND CORPORATE 
GOALS WITH QUALYSGUARD® AND ALLGRESS® 


Allgress extends QualysGuard® functionality to help customers visualize the balance between information security strategy and 
corporate goals. With Allgress’ interactive reporting capabilities and automated workflows, QualysGuard users can manage the 
information they need to make strategic security decisions. 
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Figure 2: The unified dashboard incorporates 
risk analysis, trends, and scorecards. 


Figure 1: The Vulnerability Scoreboard provides a macro view of the organization’s 
vulnerabilities. Click segments of this graph to drill down into the information contained 
in QualysGuard scans. This graph can be filtered to show specific business units, 
assets or attributes of assets (such as operating system), or vulnerability severity. 


Allgress and Qualys Together: 


e Extend Scan Data to Help you Achieve Compliance: Allgress extends QualysGuard to simplify compliance for all of the 
major standards to help you complete the audit process more efficiently. Customizable features allow you to import your own poli- 
cies and help monitor compliance. 


e Provide Business Metrics and Prioritization: In today’s business environment, operational efficiency is key. With Allgress 
Security Lifecycle Manager (ASLM), you can automatically remediate vulnerabilities from QualysGuard scans to bring your IT assets 
in line with business objectives. Prioritization tools help you focus on high-priority items, while the integrated workflow monitors 
activities and provides an audit trail to show that the work has been completed successfully. 


e Add Risk Analysis / What-if Modeling: Allgress risk analysis and what-if tools help shape your current information security 
strategy to align it with future corporate goals. ASLM can help optimize resource allocation, evaluate the impact of spending sce- 
narios, and plan the response to future threats. 


e Enhanced Reporting and Dashboard Capabilities: Make day-to-day security decisions based on QualysGuard scans in 
the way that optimizes your resources. At the enterprise level, Allgress scoreboards also provide a window into your organization’s 
overall security and compliance posture. 


Visualizing the Balance Between IT Security and Corporate Goals with QualysGuard and Allgress 
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Figure 3: Individual bubbles represent business units. Bubbles in the green area are at low risk to the 
organization. Those in the yellow or red area represent a greater risk to the organization. 


About Allgress 

Allgress provides affordable software and profes- 
sional services that enhance an organization’s ability 
to see clearly the relationship between IT security 
and risk to the organization. Our products and ser- 
vices allow ClOs and CISOs to better plan, analyze, 
manage, and communicate IT security, and to help business managers 
better understand the business risk inherent in every security decision 
as well as the security implications in every business decision. Privately 
held, Allgress was founded in 2006 and is headquartered in Livermore, 
California. 


Allgress 


For more information, visit www.allgress.com. 


About Qualys 

Qualys, Inc. is the leading provider of on demand IT security risk and 
compliance management solutions — delivered as a service. Qualys’ 
Software-as-a-Service (SaaS) solutions are deployed in a matter of hours 
anywhere in the world, providing customers an immediate and continu- 
ous view of their security and compliance postures. 


The QualysGuard® service is used today by more than 5,000 organiza- 
tions in 85 countries, including 45 of the Fortune Global 100, and per- 
forms more than 500 million IP audits per year. Qualys has the largest 
vulnerability management deployment in the world at a Fortune Global 
50 company, and has been recognized by leading industry analysts for 
its market leadership. 


Qualys has established strategic agreements with leading managed 
service providers and consulting organizations including BT, Etisalat, 
Fujitsu, IBM, I(TS)2, LAC, NTT, SecureWorks, Symantec, Tata 
Communications and TELUS. Qualys is also a founding member of the 
Cloud Security Alliance (CSA). 


For more information, visit www.qualys.com. 
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